If Klez hit you through your default shares, you have a much bigger problem -- Someone is running email with Administrator privledges. This person needs to be found and removed from the administrator list! Either that or shoot them!
Dennis At 08:43 PM 8/30/2002 -0400, Chris H wrote: >This is what I have always thought as well. >All my Exchange servers are dedicated as well as task dedicated within >Exchange as well. >However, when Klez came calling we did get some hits on the Exchange servers >through their default shares. >There didnt seem to be any damage, but I was then called to task as to why >we dont do it. > >Thanks for the feedback. >Much appreciated. > >----- Original Message ----- >From: "William Lefkovics" <[EMAIL PROTECTED]> >To: "Exchange Discussions" <[EMAIL PROTECTED]> >Sent: Friday, August 30, 2002 8:10 PM >Subject: RE: Server Protect on an Exchange Server > > > > Did he say why? It's just nonsense to say that and not provide a > > reason. > > > > If your Exchange server *gasp* provides other services, like file and > > print, then sure. If it is just an exchange server with no shares > > available to users etc, then I see no reason to. > > > > Scan all service packs prior to application to your Exchange Server as > > well as anything else you apply to it. > > > > That's just me. > > > > William > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]] On Behalf Of Chris H > > Sent: Friday, August 30, 2002 4:38 PM > > To: Exchange Discussions > > Subject: Server Protect on an Exchange Server > > > > > > I was having a discussion with someone on a Security List the other day > > who said it was nonsense to NOT run AV on an Exchange Server. Just > > exclude the DB's and all is well. I have heard also 2 sides: this is > > true and NEVER run file-level AV on an Exchange server. > > > > What's the group consensus? > > And if it is aye! He's right! Is excluding all *.edb enough? > > > > TIA! > > > > Chris > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > >_________________________________________________________________ >List posting FAQ: http://www.swinc.com/resource/exch_faq.htm >Archives: http://www.swynk.com/sitesearch/search.asp >To unsubscribe: mailto:[EMAIL PROTECTED] >Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
